Analysis

  • user interaction
    yes
  • max time kernel
    509s
  • max time network
    502s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/06/2026, 10:18

General

  • Target
    https://prismlauncher.org/
  • Sample260620-mcbbkset4k

Malware Config

Signatures

  • Downloads MZ/PE file 64 IoCs
  • Checks computer location settings 2 TTPs 6 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 29 IoCs
  • Loads dropped DLL 64 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 1 IoCs
  • Enumerates connected drives 3 TTPs 46 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Installs/modifies Browser Helper Object 2 TTPs 4 IoCs

    BHOs are DLL modules which act as plugins for Internet Explorer.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

  • Drops file in System32 directory 54 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 56 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 31 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 29 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Kills process with taskkill 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 20 IoCs
  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 56 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://prismlauncher.org/
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4956
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffcedecc188,0x7ffcedecc194,0x7ffcedecc1a0
      2⤵
        PID:368
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1752,i,11118493814262863,6921624824601830118,262144 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:2
        2⤵
          PID:3140
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,10498545640429673369,546073820930035996,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:3
          2⤵
          • System Time Discovery
          PID:4040
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2612,i,14097797074980890483,3779446288663284377,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
          2⤵
            PID:3328
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,14173484756429047437,6744943182847669324,2097152 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:1
            2⤵
              PID:2376
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,8292157086658046864,9374580120007924877,2097152 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
              2⤵
                PID:4960
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,93782588609487486,10134582037126649589,2097152 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:1
                2⤵
                  PID:2888
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,12581841784742011391,11742708107747349279,2097152 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
                  2⤵
                    PID:4232
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,12030545933434780960,15209777180037256725,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
                    2⤵
                      PID:4136
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,11022729640519116534,12880804769840787132,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
                      2⤵
                        PID:4752
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,12390988848450737007,14763835156794141582,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
                        2⤵
                          PID:5064
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,12390988848450737007,14763835156794141582,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
                          2⤵
                            PID:2420
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6180,i,3223294483460362603,12041299842728465093,2097152 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
                            2⤵
                              PID:1648
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4284,i,17653174664995771766,6188860411969209555,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
                              2⤵
                                PID:3552
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4244,i,15952339969022669887,15493565511832053524,2097152 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
                                2⤵
                                  PID:2148
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6800,i,12044068472273470958,15727076972810118695,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
                                  2⤵
                                    PID:4592
                                  • C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-11.0.2.exe
                                    "C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-11.0.2.exe"
                                    2⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Subvert Trust Controls: Mark-of-the-Web Bypass
                                    • System Location Discovery: System Language Discovery
                                    • NTFS ADS
                                    • Suspicious use of FindShellTrayWindow
                                    • Suspicious use of WriteProcessMemory
                                    PID:4592
                                    • C:\Windows\SysWOW64\TaskKill.exe
                                      TaskKill /IM prismlauncher.exe /F
                                      3⤵
                                      • System Location Discovery: System Language Discovery
                                      • Kills process with taskkill
                                      • Suspicious use of AdjustPrivilegeToken
                                      PID:6100
                                    • C:\Users\Admin\AppData\Local\Programs\PrismLauncher\vc_redist\vc_redist.x64.exe
                                      C:\Users\Admin\AppData\Local\Programs\PrismLauncher\vc_redist\vc_redist.x64.exe /install /passive /norestart
                                      3⤵
                                      • Executes dropped EXE
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious use of WriteProcessMemory
                                      PID:5660
                                      • C:\Windows\Temp\{04035DB3-336F-49E3-B0B0-0675EBA7B4F7}\.cr\vc_redist.x64.exe
                                        "C:\Windows\Temp\{04035DB3-336F-49E3-B0B0-0675EBA7B4F7}\.cr\vc_redist.x64.exe" -burn.clean.room="C:\Users\Admin\AppData\Local\Programs\PrismLauncher\vc_redist\vc_redist.x64.exe" -burn.filehandle.attached=796 -burn.filehandle.self=804 /install /passive /norestart
                                        4⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • System Location Discovery: System Language Discovery
                                        • Suspicious use of FindShellTrayWindow
                                        • Suspicious use of WriteProcessMemory
                                        PID:5936
                                        • C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\.be\VC_redist.x64.exe
                                          "C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{4C47C698-9BDA-4D88-A8E0-7CC0023183AB} {843DDC9B-3C79-4634-84FE-DDBF51BB1F5F} 5936
                                          5⤵
                                          • Executes dropped EXE
                                          • Adds Run key to start application
                                          • System Location Discovery: System Language Discovery
                                          • Suspicious use of AdjustPrivilegeToken
                                          • Suspicious use of WriteProcessMemory
                                          PID:6008
                                          • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                            "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1108 -burn.embedded BurnPipe.{9FC5AA8B-A62A-4E12-8777-96B5DE1A8580} {3A4515E4-A865-4BAC-AC71-CDDDE05D9ED8} 6008
                                            6⤵
                                            • System Location Discovery: System Language Discovery
                                            • Suspicious use of WriteProcessMemory
                                            PID:4624
                                            • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                              "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=652 -burn.filehandle.self=672 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1108 -burn.embedded BurnPipe.{9FC5AA8B-A62A-4E12-8777-96B5DE1A8580} {3A4515E4-A865-4BAC-AC71-CDDDE05D9ED8} 6008
                                              7⤵
                                              • Loads dropped DLL
                                              • System Location Discovery: System Language Discovery
                                              • Suspicious use of WriteProcessMemory
                                              PID:2040
                                              • C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
                                                "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{5B60EE05-88BD-4470-9430-B162399CB071} {C540AF5A-485C-4217-A7CD-8B8E9174D65F} 2040
                                                8⤵
                                                • System Location Discovery: System Language Discovery
                                                PID:4360
                                    • C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe
                                      "C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe"
                                      3⤵
                                      • Downloads MZ/PE file
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      • Checks processor information in registry
                                      • Suspicious behavior: AddClipboardFormatListener
                                      • Suspicious behavior: GetForegroundWindowSpam
                                      • Suspicious use of WriteProcessMemory
                                      PID:2880
                                      • C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher_updater.exe
                                        C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher_updater.exe --check-only --dir C:/Users/Admin/AppData/Roaming/PrismLauncher --debug
                                        4⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Loads dropped DLL
                                        • Suspicious behavior: AddClipboardFormatListener
                                        • Suspicious use of WriteProcessMemory
                                        PID:4368
                                        • C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe
                                          C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe --version
                                          5⤵
                                          • Executes dropped EXE
                                          • Suspicious behavior: AddClipboardFormatListener
                                          PID:2376
                                      • C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                        C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -jar C:/Users/Admin/AppData/Local/Programs/PrismLauncher/jars/JavaCheck.jar
                                        4⤵
                                        • Executes dropped EXE
                                        • Checks processor information in registry
                                        PID:3880
                                      • C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                        C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -Duser.language=en -XX:HeapDumpPath=MojangTricksIntelDriversForPerformance_javaw.exe_minecraft.exe.heapdump -Xms512m -Xmx4096m "-Djava.library.path=C:/Users/Admin/AppData/Roaming/PrismLauncher/instances/Fabulously Optimized/natives" -cp C:/Users/Admin/AppData/Local/Programs/PrismLauncher/jars/NewLaunch.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-arm64/3.4.1/lwjgl-freetype-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows-x86/3.4.1/lwjgl-freetype-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-freetype-natives-windows/3.4.1/lwjgl-freetype-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-freetype/3.4.1/lwjgl-freetype-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-glfw-natives-windows-arm64/3.4.1/lwjgl-glfw-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-glfw-natives-windows-x86/3.4.1/lwjgl-glfw-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-glfw-natives-windows/3.4.1/lwjgl-glfw-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-glfw/3.4.1/lwjgl-glfw-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-arm64/3.4.1/lwjgl-jemalloc-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows-x86/3.4.1/lwjgl-jemalloc-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc-natives-windows/3.4.1/lwjgl-jemalloc-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-jemalloc/3.4.1/lwjgl-jemalloc-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-arm64/3.4.1/lwjgl-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows-x86/3.4.1/lwjgl-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-natives-windows/3.4.1/lwjgl-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-arm64/3.4.1/lwjgl-openal-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows-x86/3.4.1/lwjgl-openal-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-openal-natives-windows/3.4.1/lwjgl-openal-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-openal/3.4.1/lwjgl-openal-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-arm64/3.4.1/lwjgl-opengl-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows-x86/3.4.1/lwjgl-opengl-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-opengl-natives-windows/3.4.1/lwjgl-opengl-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-opengl/3.4.1/lwjgl-opengl-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-arm64/3.4.1/lwjgl-shaderc-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows-x86/3.4.1/lwjgl-shaderc-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-shaderc-natives-windows/3.4.1/lwjgl-shaderc-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-shaderc/3.4.1/lwjgl-shaderc-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-arm64/3.4.1/lwjgl-spvc-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows-x86/3.4.1/lwjgl-spvc-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-spvc-natives-windows/3.4.1/lwjgl-spvc-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-spvc/3.4.1/lwjgl-spvc-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-arm64/3.4.1/lwjgl-stb-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows-x86/3.4.1/lwjgl-stb-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-stb-natives-windows/3.4.1/lwjgl-stb-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-stb/3.4.1/lwjgl-stb-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-tinyfd-natives-windows-arm64/3.4.1/lwjgl-tinyfd-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-tinyfd-natives-windows-x86/3.4.1/lwjgl-tinyfd-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-tinyfd-natives-windows/3.4.1/lwjgl-tinyfd-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-tinyfd/3.4.1/lwjgl-tinyfd-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-arm64/3.4.1/lwjgl-vma-natives-windows-arm64-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows-x86/3.4.1/lwjgl-vma-natives-windows-x86-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-vma-natives-windows/3.4.1/lwjgl-vma-natives-windows-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-vma/3.4.1/lwjgl-vma-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl-vulkan/3.4.1/lwjgl-vulkan-3.4.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/lwjgl/lwjgl/3.4.1/lwjgl-3.4.1-unsafe.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/at/yawk/lz4/lz4-java/1.10.1/lz4-java-1.10.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/azure/azure-json/1.4.0/azure-json-1.4.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/google/guava/failureaccess/1.0.3/failureaccess-1.0.3.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/google/guava/guava/33.6.0-jre/guava-33.6.0-jre.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/ibm/icu/icu4j/78.3/icu4j-78.3.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/microsoft/azure/msal4j/1.24.1/msal4j-1.24.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/authlib/9.0.75/authlib-9.0.75.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/blocklist/1.0.10/blocklist-1.0.10.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/brigadier/1.3.10/brigadier-1.3.10.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/datafixerupper/10.0.21/datafixerupper-10.0.21.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/jtracy/1.0.37/jtracy-1.0.37.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/jtracy-natives-windows/1.0.37/jtracy-natives-windows-1.0.37.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/logging/1.7.12/logging-1.7.12.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/patchy/2.2.10/patchy-2.2.10.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/text2speech/1.19.12/text2speech-1.19.12.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/commons-codec/commons-codec/1.22.0/commons-codec-1.22.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-buffer/4.2.15.Final/netty-buffer-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-codec-base/4.2.15.Final/netty-codec-base-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-codec-compression/4.2.15.Final/netty-codec-compression-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-codec-http/4.2.15.Final/netty-codec-http-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-common/4.2.15.Final/netty-common-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-handler/4.2.15.Final/netty-handler-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-resolver/4.2.15.Final/netty-resolver-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-transport-classes-epoll/4.2.15.Final/netty-transport-classes-epoll-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-transport-classes-kqueue/4.2.15.Final/netty-transport-classes-kqueue-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-transport-native-unix-common/4.2.15.Final/netty-transport-native-unix-common-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/io/netty/netty-transport/4.2.15.Final/netty-transport-4.2.15.Final.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/it/unimi/dsi/fastutil/8.5.18/fastutil-8.5.18.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/sf/jopt-simple/jopt-simple/5.0.4/jopt-simple-5.0.4.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/commons/commons-compress/1.28.0/commons-compress-1.28.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/commons/commons-lang3/3.20.0/commons-lang3-3.20.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-slf4j2-impl/2.26.0/log4j-slf4j2-impl-2.26.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/jcraft/jorbis/0.0.17/jorbis-0.0.17.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/joml/joml/1.10.8/joml-1.10.8.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/jspecify/jspecify/1.0.0/jspecify-1.0.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/slf4j/slf4j-api/2.0.17/slf4j-api-2.0.17.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/fabricmc/intermediary/26.2/intermediary-26.2.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/ow2/asm/asm/9.10.1/asm-9.10.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/ow2/asm/asm-analysis/9.10.1/asm-analysis-9.10.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/ow2/asm/asm-commons/9.10.1/asm-commons-9.10.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/ow2/asm/asm-tree/9.10.1/asm-tree-9.10.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/ow2/asm/asm-util/9.10.1/asm-util-9.10.1.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/fabricmc/sponge-mixin/0.17.3+mixin.0.8.7/sponge-mixin-0.17.3+mixin.0.8.7.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/fabricmc/fabric-loader/0.19.3/fabric-loader-0.19.3.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/mojang/minecraft/26.2/minecraft-26.2-client.jar org.prismlauncher.EntryPoint
                                        4⤵
                                        • Checks computer location settings
                                        • Executes dropped EXE
                                        • Checks processor information in registry
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious use of SetWindowsHookEx
                                        PID:1256
                                        • C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                          C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\1256_1781951005300_app.jar;local\crash_assistant\1256_1781951005300_mod.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\1256_1781951005300_args.info
                                          5⤵
                                          • Executes dropped EXE
                                          • Checks processor information in registry
                                          PID:216
                                          • C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                            C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\1256_1781951005300_app.jar;local\crash_assistant\1256_1781951005300_mod.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\1256_1781951005300_args.info -gpuDetect
                                            6⤵
                                            • Executes dropped EXE
                                            • Checks processor information in registry
                                            PID:4224
                                          • C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe
                                            C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\bin\javaw.exe -XX:+UseSerialGC -XX:MaxHeapFreeRatio=30 -XX:MinHeapFreeRatio=10 -XX:MaxGCPauseMillis=10000 -Xms8m -Xmx512m -cp local\crash_assistant\1256_1781951005300_app.jar;local\crash_assistant\1256_1781951005300_mod.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/github/oshi/oshi-core/6.9.0/oshi-core-6.9.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/com/google/code/gson/gson/2.14.0/gson-2.14.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/commons-io/commons-io/2.20.0/commons-io-2.20.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna-platform/5.17.0/jna-platform-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/net/java/dev/jna/jna/5.17.0/jna-5.17.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-api/2.26.0/log4j-api-2.26.0.jar;C:/Users/Admin/AppData/Roaming/PrismLauncher/libraries/org/apache/logging/log4j/log4j-core/2.26.0/log4j-core-2.26.0.jar dev.kostromdan.mods.crash_assistant.app.class_loading.Boot --args-file local\crash_assistant\1256_1781951005300_args.info -recursiveStart
                                            6⤵
                                            • Checks computer location settings
                                            • Executes dropped EXE
                                            • Checks processor information in registry
                                            • Suspicious use of SetWindowsHookEx
                                            PID:5928
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,6458184900417831384,13788345968418038291,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
                                    2⤵
                                      PID:5756
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4416,i,3711599130919205508,877605689748609967,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:8
                                      2⤵
                                        PID:5712
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,6524862391099908824,1293797712656726113,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
                                        2⤵
                                          PID:5656
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,6867105056747737915,8222454012065097196,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
                                          2⤵
                                            PID:5912
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5376,i,4697743377239214839,12848396217402333214,262144 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:4556
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,12151427700620658470,9741294964281600333,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
                                            2⤵
                                              PID:3896
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,10558014050636529177,6693105351566935261,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:8
                                              2⤵
                                                PID:728
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,4908325041313345928,14187604567221666670,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
                                                2⤵
                                                  PID:4696
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,4031784479139098410,15621121250017252922,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
                                                  2⤵
                                                    PID:6024
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,8186795896537820966,10174765010264709089,524288 --field-trial-handle=2428,i,1105703120529327624,11833135667368332981,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
                                                    2⤵
                                                      PID:416
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                    1⤵
                                                      PID:4292
                                                    • C:\Windows\system32\vssvc.exe
                                                      C:\Windows\system32\vssvc.exe
                                                      1⤵
                                                      • Checks SCSI registry key(s)
                                                      • Suspicious use of AdjustPrivilegeToken
                                                      PID:5192
                                                    • C:\Windows\system32\srtasks.exe
                                                      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
                                                      1⤵
                                                        PID:3812
                                                      • C:\Windows\system32\msiexec.exe
                                                        C:\Windows\system32\msiexec.exe /V
                                                        1⤵
                                                        • Enumerates connected drives
                                                        • Drops file in System32 directory
                                                        • Drops file in Windows directory
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        PID:2616
                                                      • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                        "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /burn.runonce
                                                        1⤵
                                                        • Executes dropped EXE
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:3732
                                                        • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                          "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260620111921.log" /install
                                                          2⤵
                                                          • Executes dropped EXE
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:1624
                                                          • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                            "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=540 /passive /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260620111921.log" /install
                                                            3⤵
                                                            • Checks computer location settings
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of FindShellTrayWindow
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:2192
                                                            • C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
                                                              "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{6F58AC13-F166-48F8-B31A-CFF70AC727AE} {B1706C58-D3B9-4C72-A2D2-9E212794C241} 2192
                                                              4⤵
                                                              • Executes dropped EXE
                                                              • Adds Run key to start application
                                                              • System Location Discovery: System Language Discovery
                                                              PID:4772
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                        1⤵
                                                        • Checks processor information in registry
                                                        • Enumerates system info in registry
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                        • Suspicious use of FindShellTrayWindow
                                                        • Suspicious use of SendNotifyMessage
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:644
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffceb30c728,0x7ffceb30c734,0x7ffceb30c740
                                                          2⤵
                                                            PID:5572
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,2384261702363184530,12951086921884254404,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2128 /prefetch:3
                                                            2⤵
                                                            • Downloads MZ/PE file
                                                            • System Time Discovery
                                                            PID:4340
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1708,i,990949901085390483,7965967473952715139,262144 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2032 /prefetch:2
                                                            2⤵
                                                              PID:1616
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2444,i,12169018036765167459,1424226045171065788,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2608 /prefetch:8
                                                              2⤵
                                                                PID:3740
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3240,i,17952287684691600928,3957509396193258262,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3252 /prefetch:1
                                                                2⤵
                                                                  PID:4532
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3260,i,11466260879005765472,12495962867053296443,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3312 /prefetch:1
                                                                  2⤵
                                                                    PID:1208
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4548,i,6898194120081124040,11088447571818496838,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4564 /prefetch:1
                                                                    2⤵
                                                                      PID:4360
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3928,i,5024480337886113964,9054379427756991500,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4556 /prefetch:8
                                                                      2⤵
                                                                        PID:5904
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4728,i,8084460974251131889,12882145683397234294,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4876 /prefetch:8
                                                                        2⤵
                                                                          PID:5392
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5348,i,6892271058375705873,14346538945279254405,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5264 /prefetch:8
                                                                          2⤵
                                                                            PID:692
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5588,i,7491047348559381406,8863717794536599968,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5384 /prefetch:1
                                                                            2⤵
                                                                              PID:5960
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3340,i,13610365569619633086,5749389245336380965,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5724 /prefetch:1
                                                                              2⤵
                                                                                PID:6056
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=3500,i,4288730934428250279,11660376468544110871,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3344 /prefetch:1
                                                                                2⤵
                                                                                  PID:4456
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5988,i,15140650994708278800,10233862488407854309,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6028 /prefetch:8
                                                                                  2⤵
                                                                                    PID:3340
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5936,i,10515644480330493364,1770218430228767492,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3380 /prefetch:8
                                                                                    2⤵
                                                                                      PID:1352
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6024,i,16029813188080416004,1210584801149692810,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5864 /prefetch:8
                                                                                      2⤵
                                                                                        PID:4244
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,10712844130477778304,5486749064837779186,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5360 /prefetch:8
                                                                                        2⤵
                                                                                          PID:5476
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5584,i,7163874360764290061,3075652667163046489,262144 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5684 /prefetch:8
                                                                                          2⤵
                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                          PID:3048
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,10178903858244621928,5421050151854040105,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4620 /prefetch:8
                                                                                          2⤵
                                                                                            PID:5600
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6132,i,15564973222339343726,813717132094589647,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6104 /prefetch:1
                                                                                            2⤵
                                                                                              PID:972
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=5956,i,12003848818159609324,13293082719979762571,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5908 /prefetch:1
                                                                                              2⤵
                                                                                                PID:5768
                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=3216,i,1089635582265503123,12048074559900779550,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4692 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:6028
                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6248,i,3592507677512426911,2887503483957402568,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6256 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5812
                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5364,i,7535672044567442329,17445546386620913650,2097152 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6416 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5740
                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6296,i,6173921281396962023,17552324922212250569,524288 --field-trial-handle=2036,i,5728056570593546432,3967432942060410192,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6260 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:5268
                                                                                                      • C:\Users\Admin\Downloads\jre-8u491-windows-i586-iftw.exe
                                                                                                        "C:\Users\Admin\Downloads\jre-8u491-windows-i586-iftw.exe"
                                                                                                        2⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:5872
                                                                                                        • C:\Users\Admin\AppData\Local\Temp\jds241035062.tmp\jre-8u491-windows-i586-iftw.exe
                                                                                                          "C:\Users\Admin\AppData\Local\Temp\jds241035062.tmp\jre-8u491-windows-i586-iftw.exe"
                                                                                                          3⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                          PID:3908
                                                                                                          • C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\LZMA_EXE
                                                                                                            "C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\LZMA_EXE" d "C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\au.msi" "C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\msi.tmp"
                                                                                                            4⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:2268
                                                                                                          • C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\LZMA_EXE
                                                                                                            "C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\LZMA_EXE" d "C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\jre1.8.0_491.msi" "C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\msi.tmp"
                                                                                                            4⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:820
                                                                                                          • C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaw.exe
                                                                                                            -Djdk.disableLastUsageTracking -cp "C:\Program Files (x86)\Java\jre1.8.0_491\bin\..\lib\deploy.jar" com.sun.deploy.panel.ControlPanel -systemConfig deployment.expiration.check.enabled false
                                                                                                            4⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • Drops file in Windows directory
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:2852
                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                      1⤵
                                                                                                        PID:4936
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                        1⤵
                                                                                                          PID:2184
                                                                                                        • C:\Windows\System32\rundll32.exe
                                                                                                          C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                          1⤵
                                                                                                            PID:2940
                                                                                                          • C:\Users\Admin\Downloads\LM-Studio-0.4.16-2-x64.exe
                                                                                                            "C:\Users\Admin\Downloads\LM-Studio-0.4.16-2-x64.exe"
                                                                                                            1⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:3060
                                                                                                          • C:\Windows\system32\AUDIODG.EXE
                                                                                                            C:\Windows\system32\AUDIODG.EXE 0x2f4 0x150
                                                                                                            1⤵
                                                                                                              PID:5972
                                                                                                            • C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                              C:\Windows\system32\wbem\WmiApSrv.exe
                                                                                                              1⤵
                                                                                                                PID:2560
                                                                                                              • C:\Windows\System32\GameBarPresenceWriter.exe
                                                                                                                "C:\Windows\System32\GameBarPresenceWriter.exe" -ServerName:Windows.Gaming.GameBar.Internal.PresenceWriterServer
                                                                                                                1⤵
                                                                                                                • Network Service Discovery
                                                                                                                PID:3704
                                                                                                              • C:\Windows\system32\OpenWith.exe
                                                                                                                C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                1⤵
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:1580
                                                                                                              • C:\Windows\system32\svchost.exe
                                                                                                                C:\Windows\system32\svchost.exe -k BcastDVRUserService -s BcastDVRUserService
                                                                                                                1⤵
                                                                                                                • Drops desktop.ini file(s)
                                                                                                                • Checks processor information in registry
                                                                                                                PID:4416
                                                                                                              • C:\Windows\system32\msiexec.exe
                                                                                                                C:\Windows\system32\msiexec.exe /V
                                                                                                                1⤵
                                                                                                                • Enumerates connected drives
                                                                                                                • Drops file in Program Files directory
                                                                                                                • Drops file in Windows directory
                                                                                                                • Checks processor information in registry
                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                PID:5812
                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding C4281D223C1E18C42FAFF8CA26A56320
                                                                                                                  2⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:3512
                                                                                                                • C:\Program Files (x86)\Java\jre1.8.0_491\installer.exe
                                                                                                                  "C:\Program Files (x86)\Java\jre1.8.0_491\installer.exe" /s INSTALLDIR="C:\Program Files (x86)\Java\jre1.8.0_491\\" WEB_ANALYTICS=Disable EULA=Disable INSTALL_SILENT=1 AUTO_UPDATE=Disable SPONSORS=Disable REPAIRMODE=0 ProductCode={71024AE4-039E-4CA4-87B4-2F32180491F0} TMPPINGFILE=C:\Users\Admin\AppData\Local\Temp\jdsping241035343.tmp
                                                                                                                  2⤵
                                                                                                                  • Executes dropped EXE
                                                                                                                  • Installs/modifies Browser Helper Object
                                                                                                                  • Drops file in System32 directory
                                                                                                                  • Drops file in Program Files directory
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                  • Modifies Internet Explorer settings
                                                                                                                  • Modifies data under HKEY_USERS
                                                                                                                  • Modifies registry class
                                                                                                                  PID:5588
                                                                                                                  • C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaw.exe
                                                                                                                    "C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaw.exe" -Xshare:dump -Djdk.disableLastUsageTracking
                                                                                                                    3⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    PID:3480
                                                                                                                  • C:\Program Files (x86)\Java\jre1.8.0_491\bin\ssvagent.exe
                                                                                                                    "C:\Program Files (x86)\Java\jre1.8.0_491\bin\ssvagent.exe" -doHKCUSSVSetup
                                                                                                                    3⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    • Modifies registry class
                                                                                                                    PID:6004
                                                                                                                  • C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaws.exe
                                                                                                                    "C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaws.exe" -wait -fix -permissions -silent
                                                                                                                    3⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    PID:5432
                                                                                                                    • C:\Program Files (x86)\Java\jre1.8.0_491\bin\jp2launcher.exe
                                                                                                                      "C:\Program Files (x86)\Java\jre1.8.0_491\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files (x86)\Java\jre1.8.0_491" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlMS44LjBfNDkxXGxpYlxkZXBsb3kuamFyAC1EamF2YS5zZWN1cml0eS5wb2xpY3k9ZmlsZTpDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlMS44LjBfNDkxXGxpYlxzZWN1cml0eVxqYXZhd3MucG9saWN5AC1EdHJ1c3RQcm94eT10cnVlAC1YdmVyaWZ5OnJlbW90ZQAtRGpubHB4LmhvbWU9QzpcUHJvZ3JhbSBGaWxlcyAoeDg2KVxKYXZhXGpyZTEuOC4wXzQ5MVxiaW4ALURqYXZhLnNlY3VyaXR5Lm1hbmFnZXIALURzdW4uYXd0Lndhcm11cD10cnVlAC1YYm9vdGNsYXNzcGF0aC9hOkM6XFByb2dyYW0gRmlsZXMgKHg4NilcSmF2YVxqcmUxLjguMF80OTFcbGliXGphdmF3cy5qYXI7QzpcUHJvZ3JhbSBGaWxlcyAoeDg2KVxKYXZhXGpyZTEuOC4wXzQ5MVxsaWJcZGVwbG95LmphcjtDOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlMS44LjBfNDkxXGxpYlxwbHVnaW4uamFyAC1EamF2YS5hd3QuaGVhZGxlc3M9dHJ1ZQAtRGpubHB4Lmp2bT1DOlxQcm9ncmFtIEZpbGVzICh4ODYpXEphdmFcanJlMS44LjBfNDkxXGJpblxqYXZhdy5leGU= -ma LXdhaXQALWZpeAAtcGVybWlzc2lvbnMALXNpbGVudAAtbm90V2ViSmF2YQ==
                                                                                                                      4⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                      PID:1848
                                                                                                                  • C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaws.exe
                                                                                                                    "C:\Program Files (x86)\Java\jre1.8.0_491\bin\javaws.exe" -wait -fix -shortcut -silent
                                                                                                                    3⤵
                                                                                                                    • Executes dropped EXE
                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                                                    PID:312
                                                                                                                    • C:\Program Files (x86)\Java\jre1.8.0_491\bin\jp2launcher.exe
                                                                                                                      "C:\Program Files (x86)\Java\jre1.8.0_491\bin\jp2launcher.exe" -secure -javaws -jre "C:\Program Files (x86)\Java\jre1.8.0_491" -vma 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 -ma LXdhaXQALWZpeAAtc2hvcnRjdXQALXNpbGVudAAtbm90V2ViSmF2YQ==
                                                                                                                      4⤵
                                                                                                                      • Executes dropped EXE
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                      PID:964
                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding 27DDF3EFE86E3FBEC23869B0E7DC66D9 E Global\MSI0000
                                                                                                                  2⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:1580
                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding 8AC2DABCD5282C9209A2821FE38AA0BC
                                                                                                                  2⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:3824
                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding 263F88C67DB6471B044EE50BE6F57124 E Global\MSI0000
                                                                                                                  2⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:4256
                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding BC54FBE6CC5B514682459357524BEBDC
                                                                                                                  2⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:2876
                                                                                                                • C:\Windows\syswow64\MsiExec.exe
                                                                                                                  C:\Windows\syswow64\MsiExec.exe -Embedding F999C3E338C3DD2C24D3070AB4CAA1E7 E Global\MSI0000
                                                                                                                  2⤵
                                                                                                                  • System Location Discovery: System Language Discovery
                                                                                                                  PID:3736
                                                                                                              • C:\Windows\system32\BackgroundTaskHost.exe
                                                                                                                "C:\Windows\system32\BackgroundTaskHost.exe" -ServerName:BackgroundTaskHost.WebAccountProvider
                                                                                                                1⤵
                                                                                                                  PID:1580

                                                                                                                Network

                                                                                                                      MITRE ATT&CK Enterprise v16

                                                                                                                      Replay Monitor

                                                                                                                      Loading Replay Monitor...

                                                                                                                      Downloads

                                                                                                                      e58e976.rbs

                                                                                                                      • Path C:\Config.Msi\e58e976.rbs
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 4d3c578fcaa7fc1e63f1c89d62134a77440a7462b0ad782bae17fcdd7662617c
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      e58e982.rbs

                                                                                                                      • Path C:\Config.Msi\e58e982.rbs
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 ca3e78c9d2e58c3fdbe62a2c4bb7ec4f17364b1879fb7c8102fabc7c17a2fec9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      e58e989.rbs

                                                                                                                      • Path C:\Config.Msi\e58e989.rbs
                                                                                                                      • Size 21KB
                                                                                                                      • SHA256 c763a3e46e3825ac16792de38185618f4e9859e4e1e9e109c626984c4bf3ae9a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      e58e998.rbs

                                                                                                                      • Path C:\Config.Msi\e58e998.rbs
                                                                                                                      • Size 21KB
                                                                                                                      • SHA256 edb00daa13d13032653e9b3566b283254047173d4ca71bdf938a8555972f1a80
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      e5e50ff.rbs

                                                                                                                      • Path C:\Config.Msi\e5e50ff.rbs
                                                                                                                      • Size 766KB
                                                                                                                      • SHA256 d38f62b79dc8e18ed0263c2ad264bbe1406932dc68da7141d43387861d3594a5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      e5e5103.rbs

                                                                                                                      • Path C:\Config.Msi\e5e5103.rbs
                                                                                                                      • Size 7KB
                                                                                                                      • SHA256 42119844a48de0ff74a57b0a916e2136441b575db1d726494c73cbc5fa9bb75d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      e5e5108.rbs

                                                                                                                      • Path C:\Config.Msi\e5e5108.rbs
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 602da44f40c7f7529a6204fd5e0e67f9135ac02a1f948664a4f6cafe57674f24
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Reference Documentation.url

                                                                                                                      • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit\Reference Documentation.url
                                                                                                                      • Size 193B
                                                                                                                      • SHA256 ee55ddf4cda30cd0f0fdb4fc2d0bf9ecca5dae113d1eddd9b935de8cc7ff432f
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Get Help.url

                                                                                                                      • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Get Help.url
                                                                                                                      • Size 188B
                                                                                                                      • SHA256 c9648663e9c3551188e3cefba529f544816582115597f6f74515fcf3bf496210
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Visit Java.com.url

                                                                                                                      • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java\Visit Java.com.url
                                                                                                                      • Size 184B
                                                                                                                      • SHA256 526e539f958037552de3f2dcf00554e55ce7609e2ba5656e5bbc75ba8c2ddc93
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      au.msi

                                                                                                                      • Path C:\Users\Admin\AppData\LocalLow\Oracle\Java\jre1.8.0_491\au.msi
                                                                                                                      • Size 853KB
                                                                                                                      • SHA256 923efbe2cfb8bce0ab4614c589754d5c8c55683c0ea9bb207db5c5f7dcd4f058
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      9367e8ca-e4f3-4b85-a3ea-f91038bd18e6.tmp

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9367e8ca-e4f3-4b85-a3ea-f91038bd18e6.tmp
                                                                                                                      • Size 6B
                                                                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      BrowsingTopicsState

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                                      • Size 414B
                                                                                                                      • SHA256 51a9cefd95eb6c21cc7644832a944a682b945c2904ebc9ca0b4f516e48bbb410
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 fab846477c122769b879ee71c484881e7aae9098457c285e84ec903253958393
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 936B
                                                                                                                      • SHA256 772125dcc7fcbf534208bea59995b1d4c60e82f1c5fc0e8b799d4b1f9e5f859d
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 8eeb2761d9721628672225a8cabafc313d3a164af27745f9347ef601beb2c632
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 fa63c7532166542e1984c2b01bbd70cd1ee6f50bb805b0f3d2b58e49102905fa
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 60fc3280d45732f7a0387540dba9dde10ae76ace7e0113e876f97e8e01565dde
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 fa85a7c4f7efcf6d6697bbb526dd59ceec7cd9d9d693d9f666dbbf02d3e1eb52
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 de8ca4767239f858a04ec86c83bb8f97a8bd9dfc841ad48dc9712cb1e5cd9079
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 20e79397c50dbdd6d23598004902d172dd7bebf0631a07dec1073b0dfebe3d12
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 85e7da0cebaabdc5c9ff12b168ca3b29fbb622b1f232da553255b6bc3ee0011e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 4d51094f84ed2be03c16ecb03240f951f44d31fb09754c13541a6c431abdc960
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 766da1761dbb53e4180d5dc5d53e8e46782117c89ba8bca643a2c99ef4e41c63
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 61b58ee926b1ad8c24adcc80fdca757118108a6b793b3e359ff43615836af225
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 118c08587c021654cc4bf19bd05739d1b521d7a0c594d04f7dfbb67ec9c2935d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 c93c67d6717b50479c43f439e59d6abaaaeaf6e2c36c03defc508a35e2697cd1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 bbdbd10cd1d53d8e541ec6b6e993cfe013ca909eb5f45912c4c2907e091c23d1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Secure Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 3426e293396fa1424a09f9423424627a398157ab7bfc3ec06964ae1df493a1c5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                      • Size 72B
                                                                                                                      • SHA256 f5967b57491887543d9f6e415d5f75db944c7c317efdf394b0d74aab2b925130
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 115KB
                                                                                                                      • SHA256 fef7c36e1b311b3d01e5f8c8113f3d69148adfeefa498116ed959cc006ab8506
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 235KB
                                                                                                                      • SHA256 2e325b2276caab0b7a7c052ce2323ba98225ebad1d91382afff0fba338563b16
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 235KB
                                                                                                                      • SHA256 cd5de4a914e28633ad510969592d5bea9ef258cf88f2110a225809edfe3cf742
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 236KB
                                                                                                                      • SHA256 5427b7212e850a127d453976e3d231367879ecafbf84097cf09dafbb7b99fdf0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                      • Size 236KB
                                                                                                                      • SHA256 cc2826763d078f613d1a9e4cbe89e392977b8657348586012d1bb64aa3f68ed1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      settings.dat

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                      • Size 280B
                                                                                                                      • SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      settings.dat

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                      • Size 280B
                                                                                                                      • SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      LOG.old

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                      • Size 334B
                                                                                                                      • SHA256 12129c5b0e4f1feb1fa9bd1d1bc8e21ceb838861fff9512505a688a28f13ea78
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 d8cd0ff67ff4a993301a7137862538f82cd3afd00d3d44711cd893b0f62e41b0
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      the-real-index~RFe58a1f8.TMP

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a1f8.TMP
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 c97974cbae723a42b3f28bcdd1c582a84137d4787112b86ab3ae489b28bac316
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      SiteList-Enterprise.json

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                      • Size 2B
                                                                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Edge Profile.ico

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                      • Size 70KB
                                                                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      HubApps

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                      • Size 106KB
                                                                                                                      • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 111B
                                                                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 2f033020467808c3dae575561a9df82f70a2de42ddd0cf7a7551b06f1083980a
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 0f9c5634e95d0298cd68e1103380911d1337a8e3cb0dfa0b77e94c6b7d27a9ab
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      SCT Auditing Pending Reports

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                      • Size 2B
                                                                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 89d91432c110000f166ff6dba8bd2b4dcb9ec520046b113c47c6a0fe48481587
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 9a695b859ca2a4ab32a3f177afda60a74cd8acf579aa8ad8f7156c45cdf7bfd3
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 13KB
                                                                                                                      • SHA256 a66bd73c39d5986dc5e55fa2fa4ed6b2b156698b7c2f9cb6649bd9610ab9db07
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 28KB
                                                                                                                      • SHA256 b62403d25fe834884484ae483bb1cd8f940dd1ad30059416ade358f487957cb4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Secure Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                      • Size 30KB
                                                                                                                      • SHA256 9a38a534b1e219d74081f465cab1b9c3dbeb1296a1e0b3c7b94b95ee2b54e0d6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 c6fa8409454c5f254e65afc6e6d07209745f244f2f21e36b6d363e0f803d7b79
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      the-real-index~RFe5ce3c0.TMP

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5ce3c0.TMP
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 82d936def3a71bd64bdee496234c25d7798d518c3b03ce906312394b0f497faa
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      index.txt

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                      • Size 371B
                                                                                                                      • SHA256 317f3b3d0807b81dfcb903fe107a9ca709c0a6f2df71f5d4f3063b96ae428ae8
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      sync_diagnostic.log

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 64936c8fd6e1c6ec443918ebf6ace57f9881f5fb40a2b4f7174d990f5693457f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      84c0d2c2-f9bf-489d-b7d0-df1d13cee432.tmp

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\84c0d2c2-f9bf-489d-b7d0-df1d13cee432.tmp
                                                                                                                      • Size 22KB
                                                                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 006b0b95b248c95e86e2dfeb2b17942f0455d9a9cf7e345c05ac10b00a6d3bd3
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 cafdf097bbbf9ee4637ac67df897d4393cac98adfa917ac75ac660f43a18ad59
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 0f2319dac8d4c695f1f8c4b319c44c3c1e42b440afb3cefda9eb3ca18bc63b83
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 fa3b45e37d3fbc93348e5036b629acf298a7d6365dc1700eeee7e18673e98742
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 27KB
                                                                                                                      • SHA256 613d2f976eb7dafb546b1ee0882099fa4d12ea3eb831d3cd9b6b811ce214f9be
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 dfebeaab759d69789daaed938caef857508655c5875c8a88944825f51b8c14b1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      metadata.json

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                      • Size 13B
                                                                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 a4a95bc6027e079b04c7efadd1f3e2c8a8c74946ab554e7acfb07e5824551b2d
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      Qt6Gui.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Gui.dll
                                                                                                                      • Size 9.1MB
                                                                                                                      • SHA256 ab8e16ca1f087753b216490b217e6edf13754e5a303c577fe6475150e3706ef4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Qt6Network.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Network.dll
                                                                                                                      • Size 1.7MB
                                                                                                                      • SHA256 440d4a640216b6ce66d5d7c1229f741619b5eec17b78aec5be2c31aab36b3419
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Qt6NetworkAuth.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6NetworkAuth.dll
                                                                                                                      • Size 289KB
                                                                                                                      • SHA256 81d0b91e4a4742cf1247e97ac70cbb95ce5f10c1c8ea20c8d06153d6148372d4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Qt6OpenGL.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6OpenGL.dll
                                                                                                                      • Size 1.9MB
                                                                                                                      • SHA256 220587b7473d8698d98119250a8f3d11aba0d4545f0a2a245513100a65e5574c
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Qt6Widgets.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Widgets.dll
                                                                                                                      • Size 6.3MB
                                                                                                                      • SHA256 b0b0786a526c2b8cee270ba663323b6d039bf97acb68bf66b072fb5737759244
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Qt6Xml.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\Qt6Xml.dll
                                                                                                                      • Size 159KB
                                                                                                                      • SHA256 1ab2179c16cc54db8702791cbe323aca0a4681ecbc5a8214a5e580eb2e62a7cd
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      archive.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\archive.dll
                                                                                                                      • Size 731KB
                                                                                                                      • SHA256 6ec07b7234d4cee6bae528f2ac619e3f2ac21c5570f0432276c795678eb3456e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      cmark.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\cmark.dll
                                                                                                                      • Size 155KB
                                                                                                                      • SHA256 068156a998f79b1a815411bafad2af5369a109276cefba6517a72f28d56bbfa7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      prismlauncher.exe

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\prismlauncher.exe
                                                                                                                      • Size 9.2MB
                                                                                                                      • SHA256 ba72817825e0bfcba7633a607eba38611929446dda6ad47ef38bb432b5b66cd6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      qrencode.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\qrencode.dll
                                                                                                                      • Size 62KB
                                                                                                                      • SHA256 8b3fbbdad47c3b8ab98422968e28c134beefa2e78b01e1b8c3618981ed417b99
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      tomlplusplus-3.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\tomlplusplus-3.dll
                                                                                                                      • Size 391KB
                                                                                                                      • SHA256 0267a2177a1824ada67eb32ca0ee72481309977264c57a6a61f73771306eff56
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      vc_redist.x64.exe

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\vc_redist\vc_redist.x64.exe
                                                                                                                      • Size 24.4MB
                                                                                                                      • SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      zlib1.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Programs\PrismLauncher\zlib1.dll
                                                                                                                      • Size 103KB
                                                                                                                      • SHA256 445934e9afce00dde9d49de424f08114ecf9bb27c9a9261576d3be60738ef082
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      dd_vcredist_amd64_20260620111921.log

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260620111921.log
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 3f23f149b5958baf776db28a03177ee2047f386c02858a0871076427c35f40fb
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      dd_vcredist_amd64_20260620111921_000_vcRuntimeMinimum_x64.log

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260620111921_000_vcRuntimeMinimum_x64.log
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 2c0d0a0f537015d6f48a04e74268d87d327c9d06c5db220a8b166b0a424a65a8
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      dd_vcredist_amd64_20260620111921_001_vcRuntimeAdditional_x64.log

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260620111921_001_vcRuntimeAdditional_x64.log
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 4e0057b4b3d399dfb073369722a5eb5886c069c4ddcd6a8fca70b36c490c420c
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      flatlaf-windows-x86_64-8435886907800.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\flatlaf.temp\flatlaf-windows-x86_64-8435886907800.dll
                                                                                                                      • Size 33KB
                                                                                                                      • SHA256 390ed515d10c94bb91e30012d4ef5545f9ebf5fc20c5c5c9c28b8ea16bf4af60
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      jna17863592112394013896.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna17863592112394013896.dll
                                                                                                                      • Size 410KB
                                                                                                                      • SHA256 e873bf5e77fe8f395882b805d462858c8ff837e1dec95dfba9c4c210bfab4a69
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      jna18297003097298138186.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna18297003097298138186.dll
                                                                                                                      • Size 267KB
                                                                                                                      • SHA256 5a7ff949f6d93d86491eb5b26b1cfc60051168a60622650224b89995ac420023
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      jusched.log

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\jusched.log
                                                                                                                      • Size 164KB
                                                                                                                      • SHA256 91b877d0c6b0a36f53d767636c932649af7094361e1dc0e76d4cc82ae24fc833
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      OpenAL.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\OpenAL.dll
                                                                                                                      • Size 1.9MB
                                                                                                                      • SHA256 5d229e267dcdea81a2c20ca2de401df574ae19f2486e2563dafc43decf057615
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      freetype.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\freetype.dll
                                                                                                                      • Size 2.1MB
                                                                                                                      • SHA256 49aa563541be1df58acd982f3b9586553078dd3e978ea5385281200eb42b6f9b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      glfw.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\glfw.dll
                                                                                                                      • Size 521KB
                                                                                                                      • SHA256 b0548e974e03b1bb597f9696b3f9d75df66af3cbea0b8246adcb2c79de0653af
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      jemalloc.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\jemalloc.dll
                                                                                                                      • Size 390KB
                                                                                                                      • SHA256 557cc5f6dc2e7b410111afe83a11f3a8da8963ca8eddf0c542559329cbc0a5c2
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      lwjgl.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\lwjgl.dll
                                                                                                                      • Size 509KB
                                                                                                                      • SHA256 6a1469be51e2fa8be8c70d8aa7bcaa4a1704055c62291490ea453f3ce3128377
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      lwjgl_opengl.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\lwjgl_opengl.dll
                                                                                                                      • Size 351KB
                                                                                                                      • SHA256 19882eb95b4c10d23a5e2caf61672cb367e445ae168f7f87bc69b787108b9081
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      lwjgl_stb.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\lwjgl_stb.dll
                                                                                                                      • Size 593KB
                                                                                                                      • SHA256 4642e771ff4467baec2176632103e0fa6f0fb8817954c59606944a2e746042d0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      lwjgl_tinyfd.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\lwjgl_Admin\3.4.1-snapshot\x64\lwjgl_tinyfd.dll
                                                                                                                      • Size 249KB
                                                                                                                      • SHA256 a68bca84a9f40b8059db58042db3271a6dfea76826162d4103be6916cc6905b7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      StdUtils.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nskE2FB.tmp\StdUtils.dll
                                                                                                                      • Size 100KB
                                                                                                                      • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      System.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nskE2FB.tmp\System.dll
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      UAC.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nskE2FB.tmp\UAC.dll
                                                                                                                      • Size 14KB
                                                                                                                      • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      NScurl.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsu76F1.tmp\NScurl.dll
                                                                                                                      • Size 6.0MB
                                                                                                                      • SHA256 d9438094e22bd3183864b712e2cbae07f6b184a5ad7b018185e425e215feaca9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      System.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsu76F1.tmp\System.dll
                                                                                                                      • Size 12KB
                                                                                                                      • SHA256 23d618a0293c78ce00f7c6e6dd8b8923621da7dd1f63a070163ef4c0ec3033d6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      modern-wizard.bmp

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsu76F1.tmp\modern-wizard.bmp
                                                                                                                      • Size 25KB
                                                                                                                      • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      nsDialogs.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsu76F1.tmp\nsDialogs.dll
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 89a82c4849c21dfe765052681e1fad02d2d7b13c8b5075880c52423dca72a912
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      nsExec.dll

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Temp\nsu76F1.tmp\nsExec.dll
                                                                                                                      • Size 7KB
                                                                                                                      • SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      32.json

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\assets\indexes\32.json
                                                                                                                      • Size 572KB
                                                                                                                      • SHA256 2117d1852baaa3b8b23e8bb45681219c8ec30f6d3ff68e4d52be2fd349f621b9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabulously-optimized.webp

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\cache\ModrinthModpacks\logos\fabulously-optimized.webp
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 8894b53dc665a30241a22543fc8e1f4fe9e009f16f16cdd09a808d6c656168a2
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      instance.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\instance.cfg
                                                                                                                      • Size 87B
                                                                                                                      • SHA256 7125b9faadae092f2c9e364a633b64ebc1fe6c94e5e65659f704206cb656c2bf
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      better-block-entities.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\better-block-entities.pw.toml
                                                                                                                      • Size 691B
                                                                                                                      • SHA256 e7f20f1b6a67808e8b01ac7f4a4dfc3a1b4c6c43f66572e221698a74a7e88c7b
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      bettergrassify.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\bettergrassify.pw.toml
                                                                                                                      • Size 768B
                                                                                                                      • SHA256 614fe561180b6e551011fa05b16996e74f98073f1e5367e2b1f28db87b6093d4
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      cape-provider.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\cape-provider.pw.toml
                                                                                                                      • Size 795B
                                                                                                                      • SHA256 006afbf8f4c3d4d3ea962dccb39dc131e1298e56f7002d354043cc117394b24c
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      cloth-config.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\cloth-config.pw.toml
                                                                                                                      • Size 621B
                                                                                                                      • SHA256 da3e5ce3ec0f0950029287188420a24731f4eab4177d6a4a624a4472f223914e
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      configmanager.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\configmanager.pw.toml
                                                                                                                      • Size 717B
                                                                                                                      • SHA256 5e56f1f9e91abce0a91f4472004e7ea2141f22450a5862cd12eb771d13e98a9f
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      continuity.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\continuity.pw.toml
                                                                                                                      • Size 662B
                                                                                                                      • SHA256 9856aaf5ef10be90f96187f65241f694f9fa02dc44b129bf8850a4c676d6a577
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      controlify.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\controlify.pw.toml
                                                                                                                      • Size 827B
                                                                                                                      • SHA256 0e5a567d834da25e3ffab76cb226d9823bebdf963eafa6efa18478e155d72b3c
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      crash-assistant.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\crash-assistant.pw.toml
                                                                                                                      • Size 649B
                                                                                                                      • SHA256 129cf72fef95f922a66b136181a16a67316b2de057b23675cdca2dc6f496a6b0
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      dynamic-fps.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\dynamic-fps.pw.toml
                                                                                                                      • Size 847B
                                                                                                                      • SHA256 8af322edbcfc13bd905ca483ce6f021b73aa1cdd8de1896190db4c09c707e0ac
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      entitytexturefeatures.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\entitytexturefeatures.pw.toml
                                                                                                                      • Size 687B
                                                                                                                      • SHA256 9f4d8c48f85df2dcd52aad31bc15a745f9011b5c106a9bee813c50dd49f9bc38
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      fabric-api.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\fabric-api.pw.toml
                                                                                                                      • Size 618B
                                                                                                                      • SHA256 77715ff43f67b2e150a5af9d6b4ffedc4ff05f8b685c142cda30ff3b6388d658
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      fabric-language-kotlin.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\fabric-language-kotlin.pw.toml
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 ee19fd713240c0fa9cf648e367db3e0d3e320a6ef334c12f660aaef89b7d20f3
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      ferrite-core.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\ferrite-core.pw.toml
                                                                                                                      • Size 639B
                                                                                                                      • SHA256 9b2304f9023f080df74c3621fda406278bef3c50f5ceec2abb93ce76f689875e
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      forge-config-api-port.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\forge-config-api-port.pw.toml
                                                                                                                      • Size 771B
                                                                                                                      • SHA256 1ac39c684ced58a04169a7b4282dbde9639e9c48b23ad06105f0c7bcd75f7b3e
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      iris.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\iris.pw.toml
                                                                                                                      • Size 692B
                                                                                                                      • SHA256 479835c2125444fc0ff31dd24ddebfffa8f3a025beb6912988537ae85cab9837
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      ixeris.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\ixeris.pw.toml
                                                                                                                      • Size 632B
                                                                                                                      • SHA256 04e201f44193b1491a62d07feb723ffa97fbe34c897ac96d11e4f2af01a97f0c
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      lambdynamiclights.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\lambdynamiclights.pw.toml
                                                                                                                      • Size 895B
                                                                                                                      • SHA256 f638020ab0cc272c0e22eaf85a7341c44f3f635c84c2f852de37bcd03faaa2f7
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      lithium.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\lithium.pw.toml
                                                                                                                      • Size 642B
                                                                                                                      • SHA256 d1e60a9a8f220e90d259c99f1dcf974e444ea878016492809789bd1546b9b049
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      main-menu-credits.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\main-menu-credits.pw.toml
                                                                                                                      • Size 667B
                                                                                                                      • SHA256 36960d15997726377047ac8c0b80f7faec0373ebce1c4492caa5097468fa565d
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      modmenu.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\modmenu.pw.toml
                                                                                                                      • Size 757B
                                                                                                                      • SHA256 214cc76b8a7b44494de02ec390b2ca8eb2d53d50388776af2a10846b013a72c0
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      morechathistory.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\morechathistory.pw.toml
                                                                                                                      • Size 642B
                                                                                                                      • SHA256 f1798a8e4842d29b2556a11b3825661465477c78525c9c2b4473b53661f58365
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      moreculling.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\moreculling.pw.toml
                                                                                                                      • Size 691B
                                                                                                                      • SHA256 a6a543899644a66ec414ddac8e10b4c606f9c402fa4747a36a4d4a58c26f5a74
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      puzzle.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\puzzle.pw.toml
                                                                                                                      • Size 671B
                                                                                                                      • SHA256 e1dcee631de35538362c7d493aa981825a74b11cc3e9c775ed5d57082e5bc7b5
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      reeses-sodium-options.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\reeses-sodium-options.pw.toml
                                                                                                                      • Size 860B
                                                                                                                      • SHA256 7ee3df215209378688a7afe15304a876035c55b863d5aadc1aa3df8a4fa51627
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      rrls.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\rrls.pw.toml
                                                                                                                      • Size 672B
                                                                                                                      • SHA256 5ba36575a7ddd94c3ba5cccc21e97ab256a2a8e27fdec73714e839850bcef1a7
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      skyboxify.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\skyboxify.pw.toml
                                                                                                                      • Size 799B
                                                                                                                      • SHA256 eeb520c5c1f0a1e1de66421b5d85426afc9123a1d1a947f81eefd260869b8c12
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      sodium-extra.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\sodium-extra.pw.toml
                                                                                                                      • Size 832B
                                                                                                                      • SHA256 edca120dfd25b1ed99309634ad9b6cd531678d2c6bb1abfcb6752b6352a3be01
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      sodium-shadowy-path-blocks.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\sodium-shadowy-path-blocks.pw.toml
                                                                                                                      • Size 749B
                                                                                                                      • SHA256 4b98cc8c883e06ba37a06021eee1abf39083f5ac5b8048f0aa81c25a5cf243bb
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      sodium.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\.tmp\6440bc\minecraft\mods\.index\sodium.pw.toml
                                                                                                                      • Size 629B
                                                                                                                      • SHA256 da2392e4cc915da46dc6399a26e73c6b740502b1daec1b9b7fd2f744aa0afea3
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      instance.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\instance.cfg
                                                                                                                      • Size 132B
                                                                                                                      • SHA256 11ecb85c09fd254595774353386ae325b2e1262369a2f3167d1fd9b0d2a97370
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      instance.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\instance.cfg
                                                                                                                      • Size 194B
                                                                                                                      • SHA256 1acc18c7df7aefac294f496b1f1159f187beb0dc3de2e93be1af35195e41ec90
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      instance.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\instance.cfg
                                                                                                                      • Size 475B
                                                                                                                      • SHA256 2f59ec96cf46389e4fd3e6e1bb2b0ba6d4e16a0a02b0a9e4039223876c0ccf7b
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      cloth-basic-math-0.6.1-17ea6dce277cc3b8.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\cloth-basic-math-0.6.1-17ea6dce277cc3b8.jar
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 2527eb04394e7a13fa5b8884baa9319f60b07ad6229d759f9451563cd113c059
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_electronwill_night-config_core-3.8.4-305d14ab144f848b.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_electronwill_night-config_core-3.8.4-305d14ab144f848b.jar
                                                                                                                      • Size 378KB
                                                                                                                      • SHA256 1af534fd61cbce64e89ee7072536396c2a8340ac3dfc1191cf95356a0228ca35
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_electronwill_night-config_toml-3.8.4-911139640ed50e00.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_electronwill_night-config_toml-3.8.4-911139640ed50e00.jar
                                                                                                                      • Size 39KB
                                                                                                                      • SHA256 546f48b30f87e238dd6f68764d7a98ab9b2f5faf94f3cd876459144e19050f4b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_moulberry_mixinconstraints-1.1.0-97972b36b9db2de4.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_moulberry_mixinconstraints-1.1.0-97972b36b9db2de4.jar
                                                                                                                      • Size 28KB
                                                                                                                      • SHA256 0f8dd72dad5df63e6c334620b37d4aed152dc76d8d4c7d7abf1c7b12c1bbe9e9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_twelvemonkeys_common_common-io-3.12.0-86b1ac244fa6455c.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_twelvemonkeys_common_common-io-3.12.0-86b1ac244fa6455c.jar
                                                                                                                      • Size 90KB
                                                                                                                      • SHA256 e5401be7ad9fdc80da321b2399480d0105c27ac82352f95364db93fed6058809
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_twelvemonkeys_common_common-lang-3.12.0-6be701ca605fcfc7.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_twelvemonkeys_common_common-lang-3.12.0-6be701ca605fcfc7.jar
                                                                                                                      • Size 119KB
                                                                                                                      • SHA256 eadaa83fb9906d3e9d01ba43f06ed0875d7f404afbdaa70f0b98ce7fdeda7ab4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_twelvemonkeys_common_common-mage-3.12.0-deb3b1501a6070e5.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_twelvemonkeys_common_common-mage-3.12.0-deb3b1501a6070e5.jar
                                                                                                                      • Size 78KB
                                                                                                                      • SHA256 eb5095e196b84a3c2d17c2a11ec0bb2aa9a7a2e48c68eebabe54438b65a77332
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_twelvemonkeys_imageio_imageiadata-3.12.0-d4e6b5ecedfe42c.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_twelvemonkeys_imageio_imageiadata-3.12.0-d4e6b5ecedfe42c.jar
                                                                                                                      • Size 81KB
                                                                                                                      • SHA256 fd5eac600bde93a1469caedfa00d3efc7b46a91385a0850fccc34e0f41ed47fd
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_twelvemonkeys_imageio_imageicore-3.12.0-3b260d8299c9b513.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_twelvemonkeys_imageio_imageicore-3.12.0-3b260d8299c9b513.jar
                                                                                                                      • Size 117KB
                                                                                                                      • SHA256 264c6b9476d950f93ddf83527685282ab03274013a790d2af3907dcee11fb26b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      com_twelvemonkeys_imageio_imageiwebp-3.12.0-16e1ec7310cf986c.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\com_twelvemonkeys_imageio_imageiwebp-3.12.0-16e1ec7310cf986c.jar
                                                                                                                      • Size 78KB
                                                                                                                      • SHA256 eefc795a63c12aa2b64df751eb993f2fc1aa31a5eff6e24ccea075cc67bf8886
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      conditional-mixin-0.6.3-371dd4ded000e1fe.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\conditional-mixin-0.6.3-371dd4ded000e1fe.jar
                                                                                                                      • Size 27KB
                                                                                                                      • SHA256 a47f6d77707f95243345b6e10086f83b4bcc329f66686904ea3c8ad1c3393f94
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      dev_isxander_libsdl4j-3.2.18.rele-3.2.18-79-8855283fcbeb23eb.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\dev_isxander_libsdl4j-3.2.18.rele-3.2.18-79-8855283fcbeb23eb.jar
                                                                                                                      • Size 86KB
                                                                                                                      • SHA256 31dcf3d2a625b27548ffead0abe6f08af02a22835e1623c425ec8be2bfe97996
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      dev_isxander_steamdeck4j-1.1.7-a49901e500f24a2f.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\dev_isxander_steamdeck4j-1.1.7-a49901e500f24a2f.jar
                                                                                                                      • Size 43KB
                                                                                                                      • SHA256 2287929f5324a01b457716cbcee8c7182a4a73c6d182bc8d9cf5b7dfae67d9a2
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      dynamic_fps_common-3.11.9-7d7a5afcbba3e9ee.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\dynamic_fps_common-3.11.9-7d7a5afcbba3e9ee.jar
                                                                                                                      • Size 168KB
                                                                                                                      • SHA256 47ca415961ccf0e564a0191f9969e859985409a5df9af4dc56b9160563c93e05
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-api-base-2.0.4+ece063239c-15ed8ef9237ffb28.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-api-base-2.0.4+ece063239c-15ed8ef9237ffb28.jar
                                                                                                                      • Size 28KB
                                                                                                                      • SHA256 ed2828c21a41e1de67438a0740d5f61ecc1c12258acdb4133938500de79e78e9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-api-lookup-api-v1-2.0.17+11e1c9a39c-17a69d6c84a25cf.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-api-lookup-api-v1-2.0.17+11e1c9a39c-17a69d6c84a25cf.jar
                                                                                                                      • Size 46KB
                                                                                                                      • SHA256 e85ab48dc61eaac95d2049bb1a5b8d1e92409ef0a00f0ea583e244c38260c495
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-biome-api-v1-18.0.6+c7bd5b8e9c-f9829e1f408471d8.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-biome-api-v1-18.0.6+c7bd5b8e9c-f9829e1f408471d8.jar
                                                                                                                      • Size 74KB
                                                                                                                      • SHA256 ba5d49d53b85a53e720452e182231e626838154161b0c305a1837552eb94ba4d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-block-api-v1-3.0.3+ec56b6019c-786999d3911362b5.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-block-api-v1-3.0.3+ec56b6019c-786999d3911362b5.jar
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 04af352a35278b74951efb56856632acc4bc1d1a4436e238a124e44879307d96
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-block-getter-api-v2-2.0.7+ec56b6019c-ed97da8d6689d17.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-block-getter-api-v2-2.0.7+ec56b6019c-ed97da8d6689d17.jar
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 1f2554f5aa7c611414f55fc14fb9f2443720364d3622b3d44e999e1281f40b7b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-command-api-v2-3.1.0+00cb03469c-48b42f6071031700.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-command-api-v2-3.1.0+00cb03469c-48b42f6071031700.jar
                                                                                                                      • Size 34KB
                                                                                                                      • SHA256 dead3651770182794807470a109e2d1d06368a71164540e715a918b054d0f887
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-content-registries-v0-11.+b7a678a99c-4b21446480bf603f.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-content-registries-v0-11.+b7a678a99c-4b21446480bf603f.jar
                                                                                                                      • Size 91KB
                                                                                                                      • SHA256 fbbf0beecef1b9e70920d2c9fc93fcaa840d620e20dcb91b981fa5af8041dc2f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-convention-tags-v2-4.6.4+2aae60389c-f3b76de02edd3a06.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-convention-tags-v2-4.6.4+2aae60389c-f3b76de02edd3a06.jar
                                                                                                                      • Size 249KB
                                                                                                                      • SHA256 76fb95db87a856681fa68f3fcfe5a4c2b49fac18059e46d8a2bb04d59a6d3eaa
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-crash-report-info-v1-1.0.+086d547a9c-54d1555af9b0dd16.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-crash-report-info-v1-1.0.+086d547a9c-54d1555af9b0dd16.jar
                                                                                                                      • Size 14KB
                                                                                                                      • SHA256 ebcd6cd1fb9c02487d8e56be1fcf0692ca67d7c93507cc5d85a9ec291a0424c7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-creative-tab-api-v1-5.0.1+d871b99e9c-4e7901f330c3673f.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-creative-tab-api-v1-5.0.1+d871b99e9c-4e7901f330c3673f.jar
                                                                                                                      • Size 50KB
                                                                                                                      • SHA256 982b68ea456a5e755a6ec257c2f5ec164510ebb50d9a9ace17b768c7408f35b5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-data-attachment-api-v1-2.+aa0fd6fe9c-5e39825c73196ad4.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-data-attachment-api-v1-2.+aa0fd6fe9c-5e39825c73196ad4.jar
                                                                                                                      • Size 107KB
                                                                                                                      • SHA256 a255e3b289dddcb33e4231fb211e0bdbd7460b0082c94e658365baeac6c0eb7f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-data-generation-api-v1-25+5e56e5409c-8d2403934168d668.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-data-generation-api-v1-25+5e56e5409c-8d2403934168d668.jar
                                                                                                                      • Size 145KB
                                                                                                                      • SHA256 e11b698dfa87b85cd8f6a87436979d4413736d24bde9c19fed657a2d5c1561c6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-debug-api-v1-1.0.2+c792624d9c-b1712d73ad9ecb7c.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-debug-api-v1-1.0.2+c792624d9c-b1712d73ad9ecb7c.jar
                                                                                                                      • Size 26KB
                                                                                                                      • SHA256 c5031a3f466a22c1258cf94354c253f16aaa302836dbc9833e748fc16af75d70
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-dimensions-v1-5.1.9+9cbf5da59c-1ffd63707e3c53c2.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-dimensions-v1-5.1.9+9cbf5da59c-1ffd63707e3c53c2.jar
                                                                                                                      • Size 25KB
                                                                                                                      • SHA256 2c51e843031b88743cdd8ad8126f5870d75168ea886c512212cdacc978eaee3b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-entity-events-v1-5.0.5+06488ac19c-6537c10ef3cf4b7d.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-entity-events-v1-5.0.5+06488ac19c-6537c10ef3cf4b7d.jar
                                                                                                                      • Size 70KB
                                                                                                                      • SHA256 5114572a128698304f421456b368a6c178f8e7db698ded15efdfdedc64d01788
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-events-interaction-v0-5.2+8f57f7ee9c-4024c184ff29b666.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-events-interaction-v0-5.2+8f57f7ee9c-4024c184ff29b666.jar
                                                                                                                      • Size 63KB
                                                                                                                      • SHA256 c3f8a1b32e158ae9f8285127c13bf4d494f441e7b650ca2e02fa59dbc15954fd
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-game-rule-api-v1-4.0.8+46a6d00c9c-afe489bfcbd6df90.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-game-rule-api-v1-4.0.8+46a6d00c9c-afe489bfcbd6df90.jar
                                                                                                                      • Size 49KB
                                                                                                                      • SHA256 bbf4353420361c1d35234cf08538c198b10dabdd5a9a25e8dcb8cf2400fc8da4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-item-api-v1-14.1.6+0ecb053f9c-df445d483e850990.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-item-api-v1-14.1.6+0ecb053f9c-df445d483e850990.jar
                                                                                                                      • Size 67KB
                                                                                                                      • SHA256 10cdd8b62a0beff5de870f8e8d4eb032a94d6fc446dbd20f8ce10de81154bf9a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-key-mapping-api-v1-2.0.5+e2bdee789c-79bb49f53200cb89.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-key-mapping-api-v1-2.0.5+e2bdee789c-79bb49f53200cb89.jar
                                                                                                                      • Size 15KB
                                                                                                                      • SHA256 3ac3613c428a5c9ba647b2f7529985d2218790560d16dc5648526080fecb99f8
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-lifecycle-events-v1-4.1.3+4575b05f9c-f10466c87cc0607c.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-lifecycle-events-v1-4.1.3+4575b05f9c-f10466c87cc0607c.jar
                                                                                                                      • Size 95KB
                                                                                                                      • SHA256 1fc939ef019b78f21527fb468c63127218269bd92334b268bf9396a03d140200
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-loot-api-v3-3.0.17+06488ac19c-cd634c00986bec1e.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-loot-api-v3-3.0.17+06488ac19c-cd634c00986bec1e.jar
                                                                                                                      • Size 31KB
                                                                                                                      • SHA256 80a9c0c2ed40ca2869c4c22a2e8a98b9e83e5bf9d055d6ea1efd1876e4e3e34d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-menu-api-v1-2.0.16+086d547a9c-dc6f74ce9e01354b.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-menu-api-v1-2.0.16+086d547a9c-dc6f74ce9e01354b.jar
                                                                                                                      • Size 23KB
                                                                                                                      • SHA256 e2240d5ff636a71da1e9cbfd86411569ecee6ae92fa068b08d7680f193500785
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-message-api-v1-7.0.7+086d547a9c-c145f4f1e62f0fe0.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-message-api-v1-7.0.7+086d547a9c-c145f4f1e62f0fe0.jar
                                                                                                                      • Size 38KB
                                                                                                                      • SHA256 d91e1d46a61a5f013f6d035dfeddefab29712bd54b71036eef987dcb983c1c5d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-model-loading-api-v1-8.0.+c80601bb9c-898038b14d51841a.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-model-loading-api-v1-8.0.+c80601bb9c-898038b14d51841a.jar
                                                                                                                      • Size 85KB
                                                                                                                      • SHA256 e5efa50aaf7b0d1f13d1698b20ddf12c8cd67a83725333a3546cfa6189cf5061
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-networking-api-v1-6.3.3+72073ef09c-41075dff995480bd.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-networking-api-v1-6.3.3+72073ef09c-41075dff995480bd.jar
                                                                                                                      • Size 220KB
                                                                                                                      • SHA256 add778c6e7a73c4ad2352402be0a98184437a277ce42efc8ea1e4df1bf80995f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-object-builder-api-v1-24.+46a6d00c9c-2ccac7d355e7fdfd.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-object-builder-api-v1-24.+46a6d00c9c-2ccac7d355e7fdfd.jar
                                                                                                                      • Size 51KB
                                                                                                                      • SHA256 caa777058a7a6315659c0a906176459bd385b9300da5b87af6672e4e12e92670
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-particles-v1-5.0.18+d1756aa99c-2cc85779f33b32b4.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-particles-v1-5.0.18+d1756aa99c-2cc85779f33b32b4.jar
                                                                                                                      • Size 50KB
                                                                                                                      • SHA256 3520f53bac0423033b70695b5a2d382286b91e2c67c3dc95b767a558865e9bef
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-permission-api-v1-1.0.2+7c33558a9c-6c91792be0c13e9a.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-permission-api-v1-1.0.2+7c33558a9c-6c91792be0c13e9a.jar
                                                                                                                      • Size 38KB
                                                                                                                      • SHA256 ee30369f23011d4e856e4fd378fac556124217d57df5551464dd2671d74d098b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-recipe-api-v1-9.0.20+11e1c9a39c-2556ccd28a805ab4.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-recipe-api-v1-9.0.20+11e1c9a39c-2556ccd28a805ab4.jar
                                                                                                                      • Size 90KB
                                                                                                                      • SHA256 0dbe9225b8bfe7eb93c953a4fb063247c024bda3d011b242b06dac3c07eb157b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-registry-sync-v0-7.1.0+c7bd5b8e9c-1837e59087f30566.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-registry-sync-v0-7.1.0+c7bd5b8e9c-1837e59087f30566.jar
                                                                                                                      • Size 115KB
                                                                                                                      • SHA256 3737f76322e686d709b5ac85b2ca7e75257dc2424cd5d8d5c9749c0803f9ac24
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-renderer-api-v1-14.0.1+eec4cc519c-6b2ce87dd6b5c492.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-renderer-api-v1-14.0.1+eec4cc519c-6b2ce87dd6b5c492.jar
                                                                                                                      • Size 118KB
                                                                                                                      • SHA256 2826c35ae58658a9c8abd8e28383e69f7c776613189dc2129c8089ce41313439
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-renderer-indigo-9.0.1+e73ab60d9c-37c49569f33e44c9.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-renderer-indigo-9.0.1+e73ab60d9c-37c49569f33e44c9.jar
                                                                                                                      • Size 88KB
                                                                                                                      • SHA256 733102092dc16d6cd40af062a7a560c513b4cc207e93dcd52fbbd2ed17900929
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-rendering-fluids-v1-6.0.4+06488ac19c-7742a631bb731782.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-rendering-fluids-v1-6.0.4+06488ac19c-7742a631bb731782.jar
                                                                                                                      • Size 21KB
                                                                                                                      • SHA256 d3afbfe0a328c9ee39d6565c7e467f0cf9acf61c543da201647214965ddc998e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-rendering-v1-25.1.6+46a6d00c9c-1c943a8cabd94571.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-rendering-v1-25.1.6+46a6d00c9c-1c943a8cabd94571.jar
                                                                                                                      • Size 179KB
                                                                                                                      • SHA256 9c79782e6a4a99f25ce69b36b3e9321cfeb2a0e348f858eab1e9905313ba686f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-resource-conditions-api-v+10e9a28b9c-1adebe1bea25d732.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-resource-conditions-api-v+10e9a28b9c-1adebe1bea25d732.jar
                                                                                                                      • Size 54KB
                                                                                                                      • SHA256 b567d4aaee6812771ef578e757a3be1635b1d2b11e49c4f700238a0f885cb8ee
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-resource-loader-v0-3.3.20+4fc5413f9c-5f4321ece30599a8.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-resource-loader-v0-3.3.20+4fc5413f9c-5f4321ece30599a8.jar
                                                                                                                      • Size 17KB
                                                                                                                      • SHA256 c0482b961d1d57c55b923c5425371b065546565544b8c18fb6d4f8456aaaa8c9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-resource-loader-v1-2.0.13+9edec1269c-2d80098358c60026.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-resource-loader-v1-2.0.13+9edec1269c-2d80098358c60026.jar
                                                                                                                      • Size 130KB
                                                                                                                      • SHA256 62867f6ef2d3648e1c1d13945f188e1458a32694c213feda1c93a1ab86362369
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-screen-api-v1-5.0.3+086d547a9c-5bb2010fcfe00172.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-screen-api-v1-5.0.3+086d547a9c-5bb2010fcfe00172.jar
                                                                                                                      • Size 52KB
                                                                                                                      • SHA256 1c67bfb5ad7af18377ef69599139d62314962041e2f9c4365bd007a3f3699b5d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-serialization-api-v1-2.0.+11a26f319c-c9067a3bb12b97bf.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-serialization-api-v1-2.0.+11a26f319c-c9067a3bb12b97bf.jar
                                                                                                                      • Size 18KB
                                                                                                                      • SHA256 58e59a38e33f8e96d2e9d3e821520db5021605e8698cdcbe4d10579cc3206f5c
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-sound-api-v1-2.0.5+11a26f319c-c9e5153b03c32add.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-sound-api-v1-2.0.5+11a26f319c-c9e5153b03c32add.jar
                                                                                                                      • Size 14KB
                                                                                                                      • SHA256 43a8729b4137429d68f12964f6a69717bbbf92deb0806864709fafb0e70a0a52
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-tag-api-v1-2.1.3+794df31d9c-68520ddfd5bf5fe2.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-tag-api-v1-2.1.3+794df31d9c-68520ddfd5bf5fe2.jar
                                                                                                                      • Size 46KB
                                                                                                                      • SHA256 813bc0597a5204d8b50a00107c2653f0446710e1cf54389cfcc0fa09cef8336b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-transfer-api-v1-8.0.11+39b5a3929c-d42ddc2722095dc8.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-transfer-api-v1-8.0.11+39b5a3929c-d42ddc2722095dc8.jar
                                                                                                                      • Size 188KB
                                                                                                                      • SHA256 656c46a550440a21e10e23d51b6e3501b863707576dd332240c5ee6c20f88d9d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      fabric-transitive-access-widener+e098252d9c-2d88b08498f987da.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\fabric-transitive-access-widener+e098252d9c-2d88b08498f987da.jar
                                                                                                                      • Size 11KB
                                                                                                                      • SHA256 22c78b8340e201c3edb5b6f3561ac01078a27c3b65a2efd3bea464dd4504f2b1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      io_github_douira_glsl-transforme-3.0.0-pre3-a5fd0f336ec8f100.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\io_github_douira_glsl-transforme-3.0.0-pre3-a5fd0f336ec8f100.jar
                                                                                                                      • Size 713KB
                                                                                                                      • SHA256 92531f3ddada790c4be93fe45d9908709be5ee4ea065ad770511342758fd7447
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      lambdynlights_api-4.12.0+26.2-d80401de09bd50e1.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\lambdynlights_api-4.12.0+26.2-d80401de09bd50e1.jar
                                                                                                                      • Size 193KB
                                                                                                                      • SHA256 cbc1cc450456813d0c26d3c6af97f1d6d8d435789bfabfa22c934ec36ac8f98a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      midnightlib-1.9.3-5558875d7767a14c.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\midnightlib-1.9.3-5558875d7767a14c.jar
                                                                                                                      • Size 58KB
                                                                                                                      • SHA256 2de0991c14eb66825aa77cab4f4b0ef7fa8fb8f8e00b6a99b6f92a8c37e58e65
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      mixinextras-0.5.4-edfcdd3df0b35281.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\mixinextras-0.5.4-edfcdd3df0b35281.jar
                                                                                                                      • Size 710KB
                                                                                                                      • SHA256 bd79ddb2f54b39a08deeb50cb12439bba01481264dd5a9f5ea830551bfef31ff
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      mixinsquared-0.2.0-928210a9dd2fedd4.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\mixinsquared-0.2.0-928210a9dd2fedd4.jar
                                                                                                                      • Size 80KB
                                                                                                                      • SHA256 16dde85db0a30e2290452f5e452f2589e150bb551a54820f87b5084235421d19
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      net_lostluma_battery-2.1.0-4b6b4d294938878.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\net_lostluma_battery-2.1.0-4b6b4d294938878.jar
                                                                                                                      • Size 42KB
                                                                                                                      • SHA256 f0b2967facc6728163e504dcb557b11d7fb87e5faebeb786bc96301660a6be86
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_anarres_jcpp-1.4.14-ae60d2cfc52c368e.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_anarres_jcpp-1.4.14-ae60d2cfc52c368e.jar
                                                                                                                      • Size 74KB
                                                                                                                      • SHA256 1d115a6fd07ee28db7c33b87c41e912361dd037fa8e5202ccfb4ed264d668d54
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_antlr_antlr4-runtime-4.13.1-b805d86546810326.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_antlr_antlr4-runtime-4.13.1-b805d86546810326.jar
                                                                                                                      • Size 322KB
                                                                                                                      • SHA256 8e07b800ff81b68f1581af6d5fc3f2f376889ec99f4946bef957914a5b4b4631
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_hid4java_hid4java-0.8.0-a0ce86adad2a7d62.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_hid4java_hid4java-0.8.0-a0ce86adad2a7d62.jar
                                                                                                                      • Size 924KB
                                                                                                                      • SHA256 730e6659174236bba8996b344d0cead0afce93d4b87504ce3f58dfd454f4337d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlin_kotlin-reflect-2.4.0-5df91ca4b0e86857.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlin_kotlin-reflect-2.4.0-5df91ca4b0e86857.jar
                                                                                                                      • Size 3.6MB
                                                                                                                      • SHA256 4c75783a8ef0db07dd107397deb01b95c9914d359630fec9babfaba9ebeb1028
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlin_kotlin-stdl-jdk7-2.4.0-6c50ed69a61ccffb.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlin_kotlin-stdl-jdk7-2.4.0-6c50ed69a61ccffb.jar
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 883279c275d18f6780793003fef044e0438d4d653d1d619ffcc0f6c41396a355
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      org_jetbrains_kotlin_kotlin-stdl-jdk8-2.4.0-c228fa2696a92a18.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlin_kotlin-stdl-jdk8-2.4.0-c228fa2696a92a18.jar
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 64a104013824324649707e04cc00e4cffc483d7e068c6b872cbcac666f609da5
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      org_jetbrains_kotlin_kotlin-stdlib-2.4.0-b7c44403154bf922.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlin_kotlin-stdlib-2.4.0-b7c44403154bf922.jar
                                                                                                                      • Size 1.8MB
                                                                                                                      • SHA256 5318b3795efdc5300599ef48d4ac5b26c9406fae3e45ab240e8368d09d3a6676
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_atomicfu-jvm-0.33.0-e348aaa397d08812.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_atomicfu-jvm-0.33.0-e348aaa397d08812.jar
                                                                                                                      • Size 61KB
                                                                                                                      • SHA256 843dd749ff32112956dba51a57923ad995900665d058cb9c90d44cbeace7dcdb
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-co-jvm-1.11.0-e44c0f0f4a5439d9.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-co-jvm-1.11.0-e44c0f0f4a5439d9.jar
                                                                                                                      • Size 1.5MB
                                                                                                                      • SHA256 14f5a46b344ab7420d35ed618ed0a483687d57b23470722b6568f1b643f001f3
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-cojdk8-1.11.0-d32d9ed9e92938cf.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-cojdk8-1.11.0-d32d9ed9e92938cf.jar
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 180d58cac512a1a3003b2f11085a81636792dc13fcf0b4859e6f502a93ab9ded
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-dae-jvm-0.8.0-29674e5d8fb61b6d.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-dae-jvm-0.8.0-29674e5d8fb61b6d.jar
                                                                                                                      • Size 715KB
                                                                                                                      • SHA256 28cf54bf6dc8fd304249fea4b33ae10855e65fb4ef007c5acbbcf3dfa72f549e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-ioe-jvm-0.9.0-cf1d42afe7996083.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-ioe-jvm-0.9.0-cf1d42afe7996083.jar
                                                                                                                      • Size 151KB
                                                                                                                      • SHA256 2cf893217d01eaaf3e62e158168538e690e6f9821e404134bb5abea41b0ba6cf
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-iog-jvm-0.9.0-17ad2f282fb0c67b.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-iog-jvm-0.9.0-17ad2f282fb0c67b.jar
                                                                                                                      • Size 22KB
                                                                                                                      • SHA256 c635d8838929dc237836b12246b8b4d8a6bda4cc2ff53a683ed01ea231eddeb4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-52108abbd787b7f9.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-52108abbd787b7f9.jar
                                                                                                                      • Size 399KB
                                                                                                                      • SHA256 61222d6d12fd1529db2bb810ce5bc8a222ea3371c98a556345c2fd258798baac
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-8b8e43b961e1ce7f.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-8b8e43b961e1ce7f.jar
                                                                                                                      • Size 289KB
                                                                                                                      • SHA256 a7f8870500369a34fc817965d79866f19934cddf7975d221e348f12bb377824e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-d7ffe353d5ab8d56.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_jetbrains_kotlinx_kotlinx-se-jvm-1.11.0-d7ffe353d5ab8d56.jar
                                                                                                                      • Size 70KB
                                                                                                                      • SHA256 cb0996e2d4f908c4ec8d26c768dc2276308cb164b84e41d0c95ec7a3930cd4f6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_quiltmc_parsers_gson-0.2.1-dca73e94c7c97f1f.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_quiltmc_parsers_gson-0.2.1-dca73e94c7c97f1f.jar
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 a4ba4e7e59b327f3e2f52b0d4e6b3303bcad2cd02bae81e9641a6a989e39ed78
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      org_quiltmc_parsers_json-0.2.1-f4450bb516755a53.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\org_quiltmc_parsers_json-0.2.1-f4450bb516755a53.jar
                                                                                                                      • Size 22KB
                                                                                                                      • SHA256 a39eaafba2b77855fd05797d1435ad2de0af0809cec59cdf369c6a140635caa5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      pride-1.7.0-beta.1+26.2-ba0f505f50d432e0.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\pride-1.7.0-beta.1+26.2-ba0f505f50d432e0.jar
                                                                                                                      • Size 42KB
                                                                                                                      • SHA256 cc4f1feb3b2ee412d57303e795cd9eef98765306c0e6c6f15286b80eda53684d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      spruceui-11.0.0+26.2-eadc01e357b63c54.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\spruceui-11.0.0+26.2-eadc01e357b63c54.jar
                                                                                                                      • Size 251KB
                                                                                                                      • SHA256 e0a1841f56432d885cb965b487be4b0a89112cd47041efaa9a39b6ae19e10060
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      yumi_commons_collections-2.0.0-f1ac559880dac129.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\yumi_commons_collections-2.0.0-f1ac559880dac129.jar
                                                                                                                      • Size 14KB
                                                                                                                      • SHA256 524294bab69b36dc029ded8470981bbd30fcfaffb8749954be905f8bfe07e182
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      yumi_commons_core-2.0.0-dbd038ecbba59e42.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\yumi_commons_core-2.0.0-dbd038ecbba59e42.jar
                                                                                                                      • Size 26KB
                                                                                                                      • SHA256 0dfbfa7852dabd778bbf5cc8fc960ea13f2853b15d451fca45f1a84b6ed4bbe2
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      yumi_commons_event-2.0.0-896aeead44d8da84.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\yumi_commons_event-2.0.0-896aeead44d8da84.jar
                                                                                                                      • Size 49KB
                                                                                                                      • SHA256 6c5a9c00ad20982ba63183c7ddcc8b388f677b2397aadfa664ce03f37737cb93
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      yumi_mc_core-1.1.1+26.2-7501fb3f459f67b8.jar

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\.fabric\processedMods\yumi_mc_core-1.1.1+26.2-7501fb3f459f67b8.jar
                                                                                                                      • Size 184KB
                                                                                                                      • SHA256 606be7f1bf880c8fd40dfaada050e9b498330b3620c826ed21d743b12b368ad7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      BBEConfig.json

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\config\BBEConfig.json
                                                                                                                      • Size 109B
                                                                                                                      • SHA256 e5f2ee57e9f9c0bd81af26c1918ceee988b3d726014c411f439406dc0fe60ef1
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      config.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\config\crash_assistant\config.toml
                                                                                                                      • Size 22KB
                                                                                                                      • SHA256 5413fb54d784c0d11ce9b91196a2de7391bd05563113baaf3b4b118ab05f457f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      entity_texture_features.json

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\config\entity_texture_features.json
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 406f923b1888b566e9d701ecb155e3ebf50f889074471e4b31d193d5f721cef9
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      entity-model-features.pw.toml

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\minecraft\mods\.index\entity-model-features.pw.toml
                                                                                                                      • Size 681B
                                                                                                                      • SHA256 737f92141b3e6450049ec544bbb0b45e084c4cabb2a4c0acb703faf04ca378dc
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      mmc-pack.json

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\instances\Fabulously Optimized\mmc-pack.json
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 d9a9110f87d34343834ec0cc055f75a60893f6563f6abe3500d13e6d39226215
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      ADDITIONAL_LICENSE_INFO

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\legal\java.logging\ADDITIONAL_LICENSE_INFO
                                                                                                                      • Size 48B
                                                                                                                      • SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      ASSEMBLY_EXCEPTION

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\legal\java.logging\ASSEMBLY_EXCEPTION
                                                                                                                      • Size 43B
                                                                                                                      • SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      LICENSE

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\java\java-runtime-epsilon\legal\java.logging\LICENSE
                                                                                                                      • Size 32B
                                                                                                                      • SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 136B
                                                                                                                      • SHA256 ba5bcae132316fce22bc2dfee40ce53c7c9098701744d7ce5836e7478c0c0273
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 30B
                                                                                                                      • SHA256 e7bb8d933ad3397d35cf1706f0364ebab6b7c73b6b6846cdb0383db420c2cb25
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 93B
                                                                                                                      • SHA256 3d66da6fa83007ff0c1e7901840eca8a6b33725d4daf8972160546cd9c71c63f
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 52B
                                                                                                                      • SHA256 a85a9d50bb071347303a46f4136a1c7cce8bd90981cc0827ff197039297f27ee
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 542B
                                                                                                                      • SHA256 0cf2cf1b50a8aa3d5d6e88484023e1ed5fbeab4c5386093d0441ee64e2c73dce
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 480B
                                                                                                                      • SHA256 6845ddc37b1813a0dcfa4b02083ca9f5b4cf158f718af2503f08619828862404
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      prismlauncher.cfg

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg
                                                                                                                      • Size 414B
                                                                                                                      • SHA256 527596cfccf178094e125268891a14425fc608213e4cdace641941959e4b99b9
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      prismlauncher.cfg.lock

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\PrismLauncher\prismlauncher.cfg.lock
                                                                                                                      • Size 66B
                                                                                                                      • SHA256 90fdc92264eb943ae798159ea4a6b784eb7c0a23d86bf3c59a95b53505cc4daf
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      PrismLauncher-Windows-MSVC-Setup-11.0.2.exe.crdownload

                                                                                                                      • Path C:\Users\Admin\Downloads\PrismLauncher-Windows-MSVC-Setup-11.0.2.exe.crdownload
                                                                                                                      • Size 22.9MB
                                                                                                                      • SHA256 f747a500d5f320f03e6d586b7b02a2ad9b4e20e9e3c049560653921e5ed0e7e6
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      Unconfirmed 779960.crdownload

                                                                                                                      • Path C:\Users\Admin\Downloads\Unconfirmed 779960.crdownload
                                                                                                                      • Size 2.3MB
                                                                                                                      • SHA256 fea4ff0366edcfe931613d790194bc99e0acb78a7de4baac8698bb5ef9b69865
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      desktop.ini

                                                                                                                      • Path C:\Users\Admin\Videos\Captures\desktop.ini
                                                                                                                      • Size 190B
                                                                                                                      • SHA256 86d9f822aeb989755fac82929e8db369b3f5f04117ef96fd76e3d5f920a501d2
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      MSI5350.tmp

                                                                                                                      • Path C:\Windows\Installer\MSI5350.tmp
                                                                                                                      • Size 866KB
                                                                                                                      • SHA256 749a4a26c3f3742275b7087e6c1ee2abc1baaeed1e74c20a11ba52da534cb15c
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      MSI8860.tmp

                                                                                                                      • Path C:\Windows\Installer\MSI8860.tmp
                                                                                                                      • Size 269KB
                                                                                                                      • SHA256 a7d7b98449549710b359dcacb41642e26e9d79523fb1507860ba2ed4b314ef89
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      MSI8BFE.tmp

                                                                                                                      • Path C:\Windows\Installer\MSI8BFE.tmp
                                                                                                                      • Size 279KB
                                                                                                                      • SHA256 bf251a729726dbbc46b20ebe2465d382fbb732ecbcdd16f4c6ea4d555701f77e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      vc_redist.x64.exe

                                                                                                                      • Path C:\Windows\Temp\{04035DB3-336F-49E3-B0B0-0675EBA7B4F7}\.cr\vc_redist.x64.exe
                                                                                                                      • Size 670KB
                                                                                                                      • SHA256 568c9ba533624084ea18f7a562b4aa2249ed4e41281524a061a0d0b1008cf6bd
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      logo.png

                                                                                                                      • Path C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\.ba\logo.png
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      wixstdba.dll

                                                                                                                      • Path C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\.ba\wixstdba.dll
                                                                                                                      • Size 215KB
                                                                                                                      • SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      cab2C04DDC374BD96EB5C8EB8208F2C7C92

                                                                                                                      • Path C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\cab2C04DDC374BD96EB5C8EB8208F2C7C92
                                                                                                                      • Size 5.4MB
                                                                                                                      • SHA256 7dee5b77719fb6a6627145357c5a93bf8af2a9de54d34c79ffc1ae71d52c79f5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      cab5046A8AB272BF37297BB7928664C9503

                                                                                                                      • Path C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\cab5046A8AB272BF37297BB7928664C9503
                                                                                                                      • Size 964KB
                                                                                                                      • SHA256 640aa6c516c72444523b8fbe034db46ff4e118ed02705340e3ccb62d426ff040
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      vcRuntimeAdditional_x64

                                                                                                                      • Path C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\vcRuntimeAdditional_x64
                                                                                                                      • Size 208KB
                                                                                                                      • SHA256 7df26ee2169ef6c61c17675e1a2edbaf01bca2ed1a0bdc0f8396d029a336c1f7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      vcRuntimeMinimum_x64

                                                                                                                      • Path C:\Windows\Temp\{7352F928-86EC-497C-ABE9-8C721D9A9404}\vcRuntimeMinimum_x64
                                                                                                                      • Size 208KB
                                                                                                                      • SHA256 fe5af8f2efc9bbdd2c23f22f2d3daf480a4047acf3b1edc6ecda81147c1ec14f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      license.rtf

                                                                                                                      • Path C:\Windows\Temp\{ED0E6D46-73ED-4F61-AD34-F6AFD11014A0}\.ba\license.rtf
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      thm.wxl

                                                                                                                      • Path C:\Windows\Temp\{ED0E6D46-73ED-4F61-AD34-F6AFD11014A0}\.ba\thm.wxl
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
                                                                                                                      • MD5 SHA1 SHA512 TLSH

                                                                                                                      thm.xml

                                                                                                                      • Path C:\Windows\Temp\{ED0E6D46-73ED-4F61-AD34-F6AFD11014A0}\.ba\thm.xml
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      wixstdba.dll

                                                                                                                      • Path C:\Windows\Temp\{ED0E6D46-73ED-4F61-AD34-F6AFD11014A0}\.ba\wixstdba.dll
                                                                                                                      • Size 191KB
                                                                                                                      • SHA256 a4efbdb2ce55788ffe92a244cb775efd475526ef5b61ad78de2bcdfaddac7041
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                      memory/964-10789-0x0000000002D00000-0x0000000002D01000-memory.dmp

                                                                                                                      memory/964-10772-0x0000000002D00000-0x0000000002D01000-memory.dmp

                                                                                                                      memory/964-10765-0x0000000002D00000-0x0000000002D01000-memory.dmp

                                                                                                                      memory/1256-8740-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8741-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8838-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8827-0x00007FFCE69A0000-0x00007FFCE6A0A000-memory.dmp

                                                                                                                      memory/1256-8824-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-9149-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-9155-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-9156-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8807-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8737-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8744-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-9192-0x00007FFCE69A0000-0x00007FFCE6A0A000-memory.dmp

                                                                                                                      memory/1256-8882-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8746-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8782-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8739-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8747-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8748-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8742-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1256-8743-0x000001B4323E0000-0x000001B4333E0000-memory.dmp

                                                                                                                      memory/1848-10698-0x0000000001150000-0x0000000001151000-memory.dmp

                                                                                                                      memory/1848-10715-0x0000000001150000-0x0000000001151000-memory.dmp

                                                                                                                      memory/1848-10707-0x0000000001150000-0x0000000001151000-memory.dmp

                                                                                                                      memory/1848-10692-0x0000000001150000-0x0000000001151000-memory.dmp

                                                                                                                      memory/2040-619-0x0000000000D90000-0x0000000000E07000-memory.dmp

                                                                                                                      memory/2376-780-0x00007FFCE76B0000-0x00007FFCE7CF7000-memory.dmp

                                                                                                                      memory/2376-779-0x00007FF7E4FA0000-0x00007FF7E58D6000-memory.dmp

                                                                                                                      memory/2852-10983-0x0000000000EA0000-0x0000000000EA1000-memory.dmp

                                                                                                                      memory/2880-655-0x00007FF7E4FA0000-0x00007FF7E58D6000-memory.dmp

                                                                                                                      memory/2880-656-0x00007FFCE76B0000-0x00007FFCE7CF7000-memory.dmp

                                                                                                                      memory/3480-10443-0x0000000001720000-0x0000000001721000-memory.dmp

                                                                                                                      memory/4224-8449-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8444-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8438-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8448-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8439-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8447-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8446-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8450-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8440-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4224-8451-0x00007FFCF51D0000-0x00007FFCF51E2000-memory.dmp

                                                                                                                      memory/4224-8445-0x0000022199FF0000-0x0000022199FF1000-memory.dmp

                                                                                                                      memory/4360-617-0x0000000000D90000-0x0000000000E07000-memory.dmp

                                                                                                                      memory/4368-762-0x00007FFCE76B0000-0x00007FFCE7CF7000-memory.dmp

                                                                                                                      memory/4592-363-0x00000000737D0000-0x0000000073DE0000-memory.dmp

                                                                                                                      memory/4624-620-0x0000000000D90000-0x0000000000E07000-memory.dmp

                                                                                                                      memory/5192-506-0x0000016E3A5A0000-0x0000016E3A626000-memory.dmp